$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231382e3234392e3136302e302f31392d3139203d3e2034383038.roa File: 3231382e3234392e3136302e302f31392d3139203d3e2034383038.roa (raw, json) Hash identifier: gyEdFIZpUT6YwR3UqVvBGol3c/R688wZ35Fk2RFc6h8= Subject key identifier: 12:DD:D8:51:CC:B9:C3:EF:C9:5E:56:2D:34:38:CA:E8:60:18:C8:48 Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Certificate serial: 5CF515E8E672D819BA885DC4C57D63702CD3C92E Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231382e3234392e3136302e302f31392d3139203d3e2034383038.roa Signing time: Tue 21 Apr 2026 06:26:41 +0000 ROA not before: Tue 21 Apr 2026 06:21:41 +0000 ROA not after: Tue 20 Apr 2027 06:26:41 +0000 asID: 4808 IP address blocks: 218.249.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 00:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:f5:15:e8:e6:72:d8:19:ba:88:5d:c4:c5:7d:63:70:2c:d3:c9:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Validity Not Before: Apr 21 06:21:41 2026 GMT Not After : Apr 20 06:26:41 2027 GMT Subject: CN=12DDD851CCB9C3EFC95E562D3438CAE86018C848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:02:ac:9f:6f:ea:da:87:6b:76:99:67:d4:de: 79:fc:ca:d4:c3:c1:05:a6:77:17:32:bc:16:55:e2: 56:2b:2c:cf:51:3b:de:39:41:8f:df:bc:c8:1d:d4: 4b:64:00:05:bf:bc:4a:62:ea:f4:4e:24:d3:f6:84: 8a:46:be:0f:3c:c7:92:cc:a1:f2:f4:32:54:c9:af: 91:6c:40:3c:53:fe:03:62:e6:69:20:f8:a0:86:bd: b8:72:1d:07:4b:31:c7:93:7d:41:b6:94:ae:7d:18: 7b:71:6b:d9:00:3c:e6:83:0b:32:30:80:59:d9:b1: 08:fb:60:69:41:79:1f:79:40:ab:8e:1f:c5:4b:c0: 87:9e:66:29:dd:ca:28:6d:e2:97:f9:da:ca:5d:69: 2c:37:7d:ea:ec:b7:ae:3a:de:b9:fc:63:e6:3d:b1: 2e:02:e9:4e:3a:06:54:a5:0b:95:e0:4b:19:5e:e7: 0d:c7:7f:87:cc:52:af:57:86:e0:d9:a4:8a:ae:e3: b6:38:f7:02:fa:34:5b:30:0b:74:60:f2:5f:f4:ab: 09:8c:68:8c:15:bb:34:3c:f6:2d:74:b9:a5:5a:4b: 8c:68:2e:fd:95:59:37:13:d1:2f:57:d5:fc:5a:7a: 0f:e6:6a:75:f3:9b:76:13:75:b6:da:84:89:19:d3: 2f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:DD:D8:51:CC:B9:C3:EF:C9:5E:56:2D:34:38:CA:E8:60:18:C8:48 X509v3 Authority Key Identifier: keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231382e3234392e3136302e302f31392d3139203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 218.249.160.0/19 Signature Algorithm: sha256WithRSAEncryption 3b:06:06:d1:61:eb:c6:39:09:75:60:01:52:73:d5:d1:67:ec: 82:79:78:17:37:20:d8:6b:06:87:1e:04:5f:7c:ab:a5:b5:9a: fc:4e:3b:ea:66:4f:4f:fc:a9:06:84:cc:85:35:d7:21:8b:c9: 25:c3:fd:8c:70:6d:3e:d3:17:ec:89:c6:f9:c5:0b:32:6e:8e: 78:22:ac:aa:97:25:9a:0a:e3:95:90:d5:83:03:88:d0:60:74: a0:e4:24:05:20:c8:f1:c3:a1:d8:2b:ef:bb:d3:a1:37:3e:c0: c0:8e:63:a3:4f:88:7a:d8:9a:fc:15:58:e3:e6:de:ea:f2:33: f5:06:5c:ea:f4:8d:ae:3a:0c:61:39:5f:ad:63:c0:45:e6:46: d9:13:6d:c2:5a:cc:02:42:a7:9b:93:51:b9:59:97:15:f2:d5: ff:2a:0e:3e:06:ad:45:86:62:8e:58:3f:dc:a3:ab:45:5e:87: a8:6e:e1:34:2e:86:84:4d:21:da:d6:23:1b:f1:c3:91:ad:d7: 4a:82:dd:ad:e2:c0:b0:c3:7b:a5:6f:d9:a9:e9:86:eb:b3:82: af:d2:f1:3f:85:74:39:a7:b3:78:8e:04:8c:e0:8c:42:1e:47: f0:e3:99:24:95:32:9d:b4:4c:9a:5b:ef:22:82:8a:05:6c:da: fb:20:e7:23 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUXPUV6OZy2Bm6iF3ExX1jcCzTyS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3Mzcw NUJEOTUxNTAeFw0yNjA0MjEwNjIxNDFaFw0yNzA0MjAwNjI2NDFaMDMxMTAvBgNV BAMTKDEyREREODUxQ0NCOUMzRUZDOTVFNTYyRDM0MzhDQUU4NjAxOEM4NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyAqyfb+rah2t2mWfU3nn8ytTD wQWmdxcyvBZV4lYrLM9RO945QY/fvMgd1EtkAAW/vEpi6vROJNP2hIpGvg88x5LM ofL0MlTJr5FsQDxT/gNi5mkg+KCGvbhyHQdLMceTfUG2lK59GHtxa9kAPOaDCzIw gFnZsQj7YGlBeR95QKuOH8VLwIeeZindyiht4pf52spdaSw3ferst6463rn8Y+Y9 sS4C6U46BlSlC5XgSxle5w3Hf4fMUq9XhuDZpIqu47Y49wL6NFswC3Rg8l/0qwmM aIwVuzQ89i10uaVaS4xoLv2VWTcT0S9X1fxaeg/manXzm3YTdbbahIkZ0y+NAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUEt3YUcy5w+/JXlYtNDjK6GAYyEgwHwYDVR0j BBgwFoAUrkh7csTzjqVI9nIbtgt3NwW9lRUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0Nzk0MzkzOS8wL0FFNDg3QjcyQzRGMzhFQTU0OEY2NzIxQkI2MEI3 NzM3MDVCRDk1MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3MzcwNUJEOTUxNS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NjE5OTk0Nzk0MzkzOS8wLzMyMzEzODJlMzIz NDM5MmUzMTM2MzAyZTMwMmYzMTM5MmQzMTM5MjAzZDNlMjAzNDM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBdr5oDANBgkqhkiG9w0BAQsFAAOCAQEAOwYG0WHrxjkJdWABUnPV0Wfs gnl4Fzcg2GsGhx4EX3yrpbWa/E476mZPT/ypBoTMhTXXIYvJJcP9jHBtPtMX7InG +cULMm6OeCKsqpclmgrjlZDVgwOI0GB0oOQkBSDI8cOh2Cvvu9OhNz7AwI5jo0+I etia/BVY4+be6vIz9QZc6vSNrjoMYTlfrWPAReZG2RNtwlrMAkKnm5NRuVmXFfLV /yoOPgatRYZijlg/3KOrRV6HqG7hNC6GhE0h2tYjG/HDka3XSoLdreLAsMN7pW/Z qemG67OCr9LxP4V0OaezeI4EjOCMQh5H8OOZJJUynbRMmlvvIoKKBWza+yDnIw== -----END CERTIFICATE-----Generated at Mon Apr 27 14:21:46 2026 by rpki-client